Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a666666663a3a2f34382d3438203d3e203538323032.roa
File: 326131343a373538303a666666663a3a2f34382d3438203d3e203538323032.roa (raw, json)
Hash identifier: zJM/9bj9N5le+qdy1U6D6Gvuhd/BydF/Mc/eKCvfCp0=
Subject key identifier: 27:6C:A6:B3:89:41:DA:05:A5:44:59:03:CD:80:FA:75:B2:FB:57:75
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1A9CFB57FEF0A62836FC0E66AAAE820BEC282A37
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a666666663a3a2f34382d3438203d3e203538323032.roa
Signing time: Tue 12 Mar 2024 07:44:06 +0000
ROA not before: Tue 12 Mar 2024 07:39:06 +0000
ROA not after: Tue 11 Mar 2025 07:44:06 +0000
asID: 58202
IP address blocks: 2a14:7580:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9c:fb:57:fe:f0:a6:28:36:fc:0e:66:aa:ae:82:0b:ec:28:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 12 07:39:06 2024 GMT
Not After : Mar 11 07:44:06 2025 GMT
Subject: CN=276CA6B38941DA05A5445903CD80FA75B2FB5775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:2c:dc:24:54:d6:f1:8c:f4:59:5b:6f:96:
4c:a7:7f:cb:cb:22:db:e6:04:d4:9e:72:f0:29:9d:
b1:65:24:6b:9f:71:aa:da:0e:bb:9c:1d:71:9c:9f:
06:59:e2:66:07:6d:65:f2:b1:08:74:8f:87:9f:dd:
b4:a1:6a:7d:92:e6:64:c9:60:c0:f0:25:19:26:c0:
ca:22:46:0b:b4:33:60:01:d8:96:f0:1e:6e:a1:28:
e1:21:d6:95:a9:4c:e4:25:d1:72:58:30:39:6c:76:
eb:ab:da:72:74:a0:22:af:a8:d6:00:ad:8b:9b:10:
8d:64:43:bc:20:4b:ca:56:a0:47:ce:4d:a3:31:e2:
ce:67:fb:b2:b4:15:fa:99:da:42:d5:79:5e:87:cd:
85:bf:2d:dc:47:20:93:f1:f1:34:fb:a2:14:1f:ef:
56:7f:8a:08:5e:9c:a6:c7:0e:29:36:75:5f:3c:bb:
6b:38:e8:91:cc:f1:e7:81:9b:de:ce:60:b7:f1:fa:
7e:a5:9c:90:30:63:e1:1a:93:30:5b:a3:8d:d7:26:
8c:c4:6c:4d:b1:f3:e8:07:c5:cf:1a:b5:a9:5d:08:
7a:d7:ba:3a:cf:6b:4a:72:93:61:b5:8b:e5:00:48:
ee:1e:6c:3d:c0:1c:b5:b8:1b:bf:24:6b:9e:11:7f:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:A6:B3:89:41:DA:05:A5:44:59:03:CD:80:FA:75:B2:FB:57:75
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a666666663a3a2f34382d3438203d3e203538323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4a:bf:7c:c8:88:aa:54:0d:a3:b7:04:df:d4:db:bf:1a:a0:d5:
d7:d5:8b:10:00:61:70:6a:45:54:f6:e9:f7:d3:65:bd:73:8e:
21:23:87:f6:c0:65:34:99:88:85:86:f9:b8:3d:26:90:ce:60:
eb:99:73:e0:58:2c:c1:46:90:fe:63:eb:9c:6a:8a:2f:97:1a:
fd:cf:ba:7b:c9:4f:35:8c:3e:01:fe:b9:30:ea:3c:51:d1:dd:
ac:13:08:1f:18:0f:ed:43:5c:2f:55:45:b2:73:89:d1:ab:91:
c2:86:03:b9:64:5f:5b:3a:5b:87:09:d9:28:9a:ed:4f:4f:57:
8f:0b:0e:e8:6b:13:37:f4:5e:2f:a8:ea:65:7e:1f:c7:76:79:
69:11:e5:5b:4f:82:24:e1:ac:e8:9c:d0:3f:1c:12:d1:28:c6:
73:2a:e2:46:f3:01:6b:5f:a4:04:3f:cb:84:89:2c:06:0b:50:
33:b3:9c:4f:e5:a6:61:54:4f:f9:5d:7a:83:31:72:a5:dd:8d:
bd:d5:dd:04:3c:0c:da:43:ff:01:ea:8d:3c:41:65:93:36:1b:
1a:b1:ff:18:d7:18:34:eb:ca:81:ff:e7:d8:f2:0c:85:b3:c7:
be:4e:44:a1:76:7c:a3:72:4b:13:fc:a3:92:ab:34:d7:39:d9:
04:47:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 04:03:51 2024 by rpki-client on console-ams.rpki-client.org